Cabletron Systems SPECTRUM TRMMIM, Руководство пользователя

Страница: 112 / 120

Ring Security Configuration
6-10 Configuring Security
Changing the Ring Security Mode
Use the Enable Security and Disable Security options at the top of the Security
Config window turn security on and off; use the Security Mode options to select
the level of security you wish to activate:
Disable Security
Selecting this option disables ring security so that any station can attempt to enter
the ring. The Security Mode selections — those which determine the action that
will be taken when an unauthorized station attempts to enter the ring — are
de-activated (grayed out) when security is disabled. Security is disabled by
default.
Enable Security
Selecting this option enables you to choose one of two Security Mode options
which determine the actions that will be taken when an unauthorized MAC
address (i.e., one not in the “Allowed List”) is detected trying to enter the ring.
The two Security Mode options are:
Warn This is the default Enable Security mode. In Warn mode, new
stations can enter the ring, but a “Station Added” trap will be
sent to the network management station in response. This trap
message is only sent once, and it includes the new station’s MAC
address. Because new stations can still be added to the Allowed
List in Warn Mode, you can use this mode to allow new users to
enter the ring; while in Warn mode, the TRMMIM automatically
adds every inserted station to the Allowed List. This saves you
from entering MAC addresses one at time using the Add button.
Note that this option will be set as soon as it is selected; there is
no confirmation required.
Warn and This is the highest level of ring security, which will lock the ring
Remove to new stations. The Alarm/Remove mode sends a “Remove
MAC Frame” command to a new station attempting to enter the
ring, and a trap to your management station informing it of the
action taken. If, after three attempts the station cannot be
removed from the ring, a trap is sent to the management station
informing it that the station could not be removed.
Note that, because of the potentially serious consequences of
setting this high level of security, you will be asked to confirm
this selection before it is set.